You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Jordan Whited f0230ce0b5
go.mod,net/tstun,wgengine/netstack: implement gVisor TCP GRO for Linux (#12921)
This commit implements TCP GRO for packets being written to gVisor on
Linux. Windows support will follow later. The wireguard-go dependency is
updated in order to make use of newly exported IP checksum functions.
gVisor is updated in order to make use of newly exported
stack.PacketBuffer GRO logic.

TCP throughput towards gVisor, i.e. TUN write direction, is dramatically
improved as a result of this commit. Benchmarks show substantial
improvement, sometimes as high as 2x. High bandwidth-delay product
paths remain receive window limited, bottlenecked by gVisor's default
TCP receive socket buffer size. This will be addressed in a  follow-on
commit.

The iperf3 results below demonstrate the effect of this commit between
two Linux computers with i5-12400 CPUs. There is roughly ~13us of round
trip latency between them.

The first result is from commit 57856fc without TCP GRO.

Starting Test: protocol: TCP, 1 streams, 131072 byte blocks
- - - - - - - - - - - - - - - - - - - - - - - - -
Test Complete. Summary Results:
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  4.77 GBytes  4.10 Gbits/sec   20 sender
[  5]   0.00-10.00  sec  4.77 GBytes  4.10 Gbits/sec      receiver

The second result is from this commit with TCP GRO.

Starting Test: protocol: TCP, 1 streams, 131072 byte blocks
- - - - - - - - - - - - - - - - - - - - - - - - -
Test Complete. Summary Results:
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  10.6 GBytes  9.14 Gbits/sec   20 sender
[  5]   0.00-10.00  sec  10.6 GBytes  9.14 Gbits/sec      receiver

Updates #6816

Signed-off-by: Jordan Whited <jordan@tailscale.com>
1 year ago
..
art all: use Go 1.22 range-over-int 2 years ago
captivedetection net/captivedetection: call SetHealthy once connectivity restored (#12974) 1 year ago
connstats all: use Go 1.22 range-over-int 2 years ago
dns net/dns, cmd/tailscaled: plumb system health tracker into dns cleanup (#12969) 1 year ago
dnscache net/dnscache: use parent context to perform lookup 2 years ago
dnsfallback net/dnsfallback: set CanPort80 in static DERPMap (#12929) 1 year ago
flowtrack net/flowtrack: fix, test String method 1 year ago
ipset go.mod: bump bart 1 year ago
ktimeout net/ktimeout: add a package to set TCP user timeout 2 years ago
memnet net/memnet: export the network name (#9111) 2 years ago
netaddr all: update copyright and license headers 3 years ago
netcheck health: introduce captive-portal-detected Warnable (#12707) 1 year ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 3 years ago
netkernelconf ipn/{ipnlocal,localapi},net/netkernelconf,client/tailscale,cmd/containerboot: optionally enable UDP GRO forwarding for containers (#12410) 2 years ago
netknob all: update copyright and license headers 3 years ago
netmon all: add test for package comments, fix, add comments as needed 1 year ago
netns net/netns: remove some logspam by avoiding logging parse errors due to unspecified addresses 1 year ago
netstat all: add test for package comments, fix, add comments as needed 1 year ago
netutil all: add test for package comments, fix, add comments as needed 1 year ago
packet net/flowtrack: optimize Tuple type for use as map key 1 year ago
ping net/ping: fix ICMP echo code field to 0 2 years ago
portmapper all: use math/rand/v2 more 2 years ago
proxymux all: cleanup unused code, part 1 (#10661) 2 years ago
routetable net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 2 years ago
socks5 net/socks5: add password auth support 3 years ago
sockstats net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 2 years ago
speedtest all: update copyright and license headers 3 years ago
stun ci: enable checklocks workflow for specific packages 1 year ago
stunserver all: use Go 1.22 range-over-int 2 years ago
tcpinfo all: use Go 1.22 range-over-int 2 years ago
tlsdial net/tlsdial: relax self-signed cert health warning 1 year ago
tsaddr net/ipset, wgengine/filter/filtertype: add split-out packages 1 year ago
tsdial go.mod: bump bart 1 year ago
tshttpproxy all: use Go 1.22 range-over-int 2 years ago
tstun go.mod,net/tstun,wgengine/netstack: implement gVisor TCP GRO for Linux (#12921) 1 year ago
wsconn ci: enable checklocks workflow for specific packages 1 year ago